docs: Fix broken references and remove non-existent flags

README.md

@@ -212,7 +212,7 @@ go build -o pass-cli .
 go test ./...
 ```
 
-For testing guidelines, see [test/README.md](test/README.md). For Git workflow, see [docs/05-development/branch-workflow.md](docs/05-development/branch-workflow.md).
+For testing guidelines, see [test/README.md](test/README.md). For Git workflow, see [docs/06-development/branch-workflow.md](docs/06-development/branch-workflow.md).
 
 ## FAQ
 
@@ -248,7 +248,7 @@ For more questions and troubleshooting, see [docs/04-troubleshooting/faq.md](doc
 
 ## Contributing
 
-Contributions are welcome! See [docs/05-development/branch-workflow.md](docs/05-development/branch-workflow.md) for Git workflow and contribution guidelines.
+Contributions are welcome! See [docs/06-development/branch-workflow.md](docs/06-development/branch-workflow.md) for Git workflow and contribution guidelines.
 
 ## License
 

docs/01-getting-started/quick-start.md

@@ -68,7 +68,7 @@ Store your master password in OS keychain for convenience?
 Benefits:
   ✓ No need to type password for every operation
   ✓ Secure OS-level storage
-  ✓ Can be disabled later with --no-keychain
+  ✓ Can be disabled later via OS credential manager
 
 Enable keychain storage? (y/n): y
 
@@ -159,19 +159,24 @@ pass-cli get github
 
 #### Skip Keychain Integration
 
+During the interactive initialization, answer "n" when prompted about keychain storage:
+
 ```bash
-pass-cli init --no-keychain
+pass-cli init
+# When asked "Enable keychain storage? (y/n):", enter "n"
 ```
 
-Creates a vault without storing the master password in OS keychain. You'll need to enter your password for each operation.
+This creates a vault without storing the master password in OS keychain. You'll need to enter your password for each operation.
+
+#### Enable Audit Logging
 
-#### Disable Audit Logging
+Audit logging is disabled by default. To enable it during initialization:
 
 ```bash
-pass-cli init --no-audit
+pass-cli init --enable-audit
 ```
 
-Creates a vault without audit logging enabled (not recommended for production use).
+This creates a vault with tamper-evident HMAC-signed audit logging enabled (recommended for production use).
 
 ## Your First Credential
 

docs/03-reference/command-reference.md

@@ -1561,11 +1561,17 @@ secret-tool search service pass-cli
 secret-tool clear service pass-cli vault /old/path/vault.enc
 ```
 
-**Prevention**: When deleting or moving vaults, remove the keychain entry first:
+**Prevention**: When deleting or moving vaults, remove the keychain entry first using your OS credential manager:
+
 ```bash
-# Before deleting vault
-pass-cli change-password --no-keychain  # Disables keychain
-# OR manually remove from OS keychain
+# Windows
+cmdkey /delete:pass-cli
+
+# macOS
+security delete-generic-password -s "pass-cli" -a "$USER"
+
+# Linux
+secret-tool clear service pass-cli vault /old/path/vault.enc
 ```
 
 #### What if first-run detection doesn't trigger?